www-user-group:
  group.present:
    - name: www
    - gid: 601
    - unless: grep -o www  /etc/group
 
  user.present:
    - name: www
    - fullname: www
    - shell: /sbin/nologin
    - uid: 601
    - gid: 601
    - require:
      - group: www
